CVEvulnerability
CVE-2016-9196
6.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-04-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.7 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
A vulnerability in login authentication management in Cisco Aironet 1800, 2800, and 3800 Series Access Point platforms could allow an authenticated, local attacker to gain unrestricted root access to the underlying Linux operating system. The root Linux shell is provided for advanced troubleshooting and should not be available to individual users, even those with root privileges. The attacker must have the root password to exploit this vulnerability. More Information: CSCvb13893. Known Affected Releases: 8.2(121.0) 8.3(102.0). Known Fixed Releases: 8.4(1.53) 8.4(1.52) 8.3(111.0) 8.3(104.23) 8.2(130.0) 8.2(124.1).
Affected configurations
• cisco aironet access point 8.1\(15.14\)
• cisco aironet access point 8.1\(112.3\)
• cisco aironet access point 8.1\(112.4\)
• cisco aironet access point 8.1\(131.0\)
• cisco aironet access point 8.2\(100.0\)
• cisco aironet access point 8.2\(102.43\)
• cisco aironet access point 8.2 base
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/97468 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038187 www.securitytracker.com
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-aironet Vendor Advisory
- http://www.securityfocus.com/bid/97468 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038187 www.securitytracker.com
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-aironet Vendor Advisory